Clashmore Recruitment - Data Processing Agreement (signed)
Documentexecuted Clashmore Recruitment · dpa · executed · 2025-09-04
Executed Data Processing Agreement signed on 4 Sep 2025 under the Master Services Agreement. Clashmore Recruitment is Controller and BB-Demo is Processor. It states no price, availability figure or P1 response time.
What it says
What this says
Current to 13 Oct 26Executed Data Processing Agreement signed on 4 Sep 2025 under the Master Services Agreement. Clashmore Recruitment is Controller and BB-Demo is Processor. It states no price, availability figure or P1 response time.
What it is: an executed DPA, signed 4 Sep 2025 by Lewis Kerr for BB-Demo and the Managing Director for Clashmore Recruitment. It sits under the Master Services Agreement signed the same date.
Commits: BB-Demo will "process personal data only on the Controller's documented instructions" and will not engage another processor "without the Controller's prior written authorisation". It must tell the Controller of a breach "without undue delay".
Unusual: the brain runs inside the Controller's own Snowflake account, so BB-Demo does not copy data out unless instructed in writing. If the DPA conflicts with the MSA on personal data, the DPA prevails.
Not settled: the document gives no price, service levels, renewal date or term. Liability is left to the MSA, which is not in this record, and the Controller's signatory is not named.
As found in this document
Current to 9 Oct 26- Date signed4 Sep 2025Source: object_read:doc_163_005
- Processing instructionsprocess personal data only on the Controller's documented instructionsprocess personal data only on the Controller's documented instructions · Source: object_read:doc_163_005
- Sub-processorswill not engage another processor for the Controller's personal data without the Controller's prior written authorisationwill not engage another processor for the Controller's personal data without the Controller's prior written authorisation · Source: object_read:doc_163_005
- Breach notificationtell the Controller without undue delay if it becomes aware of a personal data breachtell the Controller without undue delay if it becomes aware of a personal data breach · Source: object_read:doc_163_005
- Return and deletionat the Controller's choice, return or delete the personal data it holds, unless the law requires it to keep itat the Controller's choice, return or delete the personal data it holds, unless the law requires it to keep it · Source: object_read:doc_163_005
The document
Body
Clashmore Recruitment - Data Processing Agreement (signed)
Status: Executed Version: 1 Signed: 4 Sep 2025
This Data Processing Agreement sits under the Master Services Agreement between BB-Demo and Clashmore Recruitment of Cork, signed on the same date.
Definitions
- Controller: Clashmore Recruitment, which decides why and how personal data is processed.
- Processor: BB-Demo, which processes personal data on the Controller's behalf.
- Personal data: any information relating to an identifiable person that is processed through the company brain.
- Data protection law: the data protection law that applies to the Controller, including the EU and UK versions of the GDPR where they apply.
Subject matter and purpose
BB-Demo provides the company brain to Clashmore Recruitment so that its consultants can see each client's roles, placements and invoices together. BB-Demo processes personal data only to provide that service and for no other purpose.
Where the data lives
Read the whole document (3,210 characters)
The company brain is built and run inside the Controller's own Snowflake account. BB-Demo does not copy the Controller's data out of that account except where the Controller instructs it in writing.
Categories of data and people
The data processed may include business contact details of the Controller's clients, candidate details held in the connected systems, placement records and invoice records. The people concerned are the Controller's clients, candidates and staff.
Processor obligations
BB-Demo will:
- process personal data only on the Controller's documented instructions;
- make sure that everyone at BB-Demo with access is bound by a duty of confidence;
- keep appropriate technical and organisational security measures in place;
- help the Controller respond to requests from people exercising their data protection rights;
- tell the Controller without undue delay if it becomes aware of a personal data breach.
Sub-processors
BB-Demo will not engage another processor for the Controller's personal data without the Controller's prior written authorisation. Where one is authorised, BB-Demo remains responsible for it and imposes the same obligations.
Audit and information
BB-Demo will give the Controller the information reasonably needed to show compliance with this agreement and will allow reasonable audits, agreed in advance and carried out during business hours.
Return and deletion
When the services end, BB-Demo will, at the Controller's choice, return or delete the personal data it holds, unless the law requires it to keep it. Because the brain runs inside the Controller's Snowflake account, the Controller keeps control of its own data throughout.
Liability and order of precedence
Liability under this agreement is governed by the Master Services Agreement. If this agreement conflicts with the Master Services Agreement on the handling of personal data, this agreement prevails.
Signatures
Signed on 4 Sep 2025.
| For BB-Demo (Processor) | For Clashmore Recruitment (Controller) |
|---|---|
| Lewis Kerr | Authorised signatory |
| Account Executive | Managing Director |
| Date: 4 Sep 2025 | Date: 4 Sep 2025 |
Unusual terms
Current to 9 Oct 26- DPA prevails over MSA on personal data
- Brain runs inside Controller's Snowflake account
- Audits agreed in advance, during business hours